2ec7ba266097924b756ac70e7ff5c0a5_JaffaCakes118 | Triage

Sharing

General

Target

2ec7ba266097924b756ac70e7ff5c0a5_JaffaCakes118
Size

260KB
MD5

2ec7ba266097924b756ac70e7ff5c0a5
SHA1

8cff45f8aca88c428f82440dc67e164e6c00efb8
SHA256

a0ee872d05772e4ca9427701960a9b9609f45f3d4283b95471fde5578c7f479e
SHA512

b970cf5a2c63e1965644f0d353aa803adaab43b7610a6ba5351387e390abb1e44416a48e2d41df349b16bb2d2a842291c20a0c6f43a48305debb8e9f957cdc8f
SSDEEP

3072:dCbsSy5SZZY/+dhL5EFFqDi6uF8bfTlT2rDw5PuOLBoc70D6/gBztyt8lMT4SsVO:esp5S4mEF4xtFuOVEBztyyUsK7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2ec7ba266097924b756ac70e7ff5c0a5_JaffaCakes118

Files

2ec7ba266097924b756ac70e7ff5c0a5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9eff66b7b018982a8bb95971389ef2b2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

SetTextColor
SetBkColor
SetWindowExtEx
EndDoc
RestoreDC
GetPaletteEntries
SetViewportOrgEx
GetTextMetricsA
OffsetViewportOrgEx
SetBkMode
LineTo
EndPath
GetPixel
GetStockObject
ExcludeClipRect
SetBrushOrgEx

user32

GetMessagePos
GetDesktopWindow
GetInputState
CharNextA

kernel32

MulDiv
DeleteFileA
GetThreadLocale
GlobalFindAtomW
GetModuleHandleA
GetDriveTypeA
GetCurrentProcessId
GetCommandLineA
lstrcmpA
GlobalFindAtomA
IsDebuggerPresent
DeleteFileW
GetOEMCP
GetCommandLineW
GetCurrentThread
SetCurrentDirectoryA
GetProcessHeap
GetConsoleOutputCP
GetTickCount
VirtualAlloc

comctl32

InitCommonControls

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 175KB - Virtual size: 175KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 79KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ